Difference between revisions of "Fsf.org/resources/webmail-systems"

From LibrePlanet
Jump to: navigation, search
(Tasks)
(3 intermediate revisions by the same user not shown)
Line 2: Line 2:
  
 
==Recommended==
 
==Recommended==
This table could be added to the "Recommended section in https://www.fsf.org/resources/webmail-systems
+
These new webmail services could be added to the "Recommended section in https://www.fsf.org/resources/webmail-systems :
 
+
* [https://bitmessage.ch/ Bitmessage.ch] (requires Tor Browser despite not being an .onion address)
{| class="wikitable sortable" border="1" style="font-size:smaller"
+
** Tor: [http://bitmailendavkbec.onion/roundcube Roundcube], [http://bitmailendavkbec.onion/squirrelmail SquirrelMail]
|-
+
* [http://mail2tor2zyjdctd.onion/ Mail2Tor] (SquirrelMail over Tor)
! Webmail
+
* [http://torbox3uiot6wchz.onion/sm/src/login.php TorBox] (SquirrelMail over Tor)
! Clearnet
+
* [https://riseup.net/ Riseup][1]
! Tor service
+
** [https://mail.riseup.net/rc/ Roundcube], [https://mail.riseup.net/sm/src/login.php SquirrelMail]
|-
+
** Tor: [http://zsolxunfmbfuq7wf.onion/rc/ Roundcube]. See [https://riseup.net/en/security/network-security/tor#riseups-tor-onion-services Riseups Tor onion services] for email configuration
! [https://bitmessage.ch/ Bitmessage.ch]<br />(https://bitmessage.ch/<br />requires Tor Browser!)
 
| No
 
|
 
[http://bitmailendavkbec.onion/roundcube http://bitmailendavkbec.onion/roundcube] (Roundcube)<br />
 
[http://bitmailendavkbec.onion/squirrelmail http://bitmailendavkbec.onion/squirrelmail] (SquirrelMail)
 
|-
 
! Kolab Now
 
| [https://kolabnow.com/ https://kolabnow.com]
 
| No
 
|-
 
! Mail2Tor
 
| No
 
| [http://mail2tor2zyjdctd.onion/ http://mail2tor2zyjdctd.onion/] (SquirrelMail)
 
|-
 
! [https://openmailbox.org/ OpenMailBox]
 
| [https://openmailbox.org/ https://openmailbox.org/]
 
| No
 
|-
 
! Posteo
 
| [https://posteo.de/ https://posteo.de/]
 
| No
 
|-
 
! [https://riseup.net/ Riseup][1]
 
|
 
[https://mail.riseup.net/rc/ https://mail.riseup.net/rc/] (Roundcube)<br />
 
[https://mail.riseup.net/sm/src/login.php https://mail.riseup.net/sm/src/login.php] (SquirrelMail)
 
| [http://zsolxunfmbfuq7wf.onion/rc/ http://zsolxunfmbfuq7wf.onion/rc/] (Roundcube)
 
|-
 
! Safe-mail.net
 
| [https://safe-mail.net/ https://safe-mail.net/]
 
| No
 
|-
 
! TorBox
 
| No
 
| [http://torbox3uiot6wchz.onion/sm/src/login.php http://torbox3uiot6wchz.onion/sm/src/login.php] (SquirrelMail)
 
|-
 
! VFEmail
 
| [https://vfemail.net/ https://vfemail.net/]
 
| No
 
|}
 
 
1: "In order to create a Red Account you will need an invite. Obtain an Invite Code from a friend." - https://riseup.net/en/email/settings/mail-accounts#how-do-i-create-an-email-account
 
1: "In order to create a Red Account you will need an invite. Obtain an Invite Code from a friend." - https://riseup.net/en/email/settings/mail-accounts#how-do-i-create-an-email-account
  
 
==Tasks==
 
==Tasks==
 +
<pre>
 +
 +
<h3>Recommended</h3>
 +
<p>Some of these services are gratis, but that's a separate issue.
 +
  Recall that "free software" refers to freedom, not price.
 +
  <ul>
 +
    <li><a href="https://openmailbox.org">OpenMailBox</a>: <strong>Runs explicitly on free software</strong>. Service started in June 2013.</li>
 +
    <li><a href="https://posteo.de">Posteo</a>: <strong>Fully compliant with LibreJS's standards, but a bug in LibreJS causes the site to not work when the plugin is enabled. Does not work without JS</strong>. Credit card payments do not work.</li>
 +
    <li><a href="https://riseup.net">Riseup</a>: Geared more toward activists - they have a manual screening process. Signup works with LibreJS. SquirrelMail (works without JS) can be used to access webmail, POP/IMAP clients can also be used. To access Squirrel mail, access the online mail client page, and select the "old webmail(squirrelmail only)" link.</li>
 +
 +
    <li>Some services will let you sign up and sign in without non-free JavaScript, and use IMAP/POP3 from a desktop program, but have broken webmail:
 +
    <ul>
 +
      <li><a href="https://kolabnow.com">Kolab Now</a>: Swiss based paid service focused on ensuring your privacy. Highly resistant to PRISM and similar programs. Runs on free software. Currently becoming LibreJS compliant.</li>
 +
      <li><a href="https://mailnesia.com">Mailnesia</a>.</li>
 +
      <li><a href="https://safe-mail.net">Safe-mail.net</a>.</li>
 +
      <li><a href="https://vfemail.net">VFEmail</a> (uses google syndication, and captcha - both non-free).</li>
 +
    </ul>
 +
</li>
 +
</ul></p>
 +
 +
<p>For privacy purposes, you may sometimes want to use a disposable email address for one or a small number of messages. These disposable email services have been verified to work without proprietary JavaScript:</p>
 +
<ul>
 +
  <li><a href="https://10minutemail.com/">10 Minute Email</a></li>
 +
  <li><a href="https://guerrillamail.com/">Guerrilla Mail</a></li>
 +
  <li><a href="https://spamgourmet.com/">Spam Gourmet</a></li>
 +
</ul>
 +
 +
<p>
 +
  To ask about a mail service not listed here, or request corrections and updates, please send a mail to: monoverde at riseup dot net : with "Webmail System" in the subject line.
 +
</p>
 +
 +
<h3>Not Recommended</h3>
 +
Systems we've investigated and found wanting.
 +
<ul>
 +
  <li><a href="https://fastmail.fm">FastMail</a>: Sign up, sign in, and webmail all work smoothly. This is a paid service with a 60-day free trial. - UPDATE: was notified that this is not the case.</li>
 +
  <li>Google <a href="https://gmail.com">Gmail</a>: You can sign in and use Gmail without non-free Javascript, but you have to make the account in a special way, through <a href="https://accounts.google.com/NewAccount">https://accounts.google.com/NewAccount</a>. This is an old sign-up form; the currently recommended sign-up form is no good, since it requires nonfree JavaScript code. But Gmail is run by Google and was specifically named as part of the PRISM spying program.</li>
 +
  <li><a href="https://mail.ru">Mail.Ru</a>: Sign up, sign in, and webmail all work smoothly. BEWARE though - it is almost certainly under governmental surveillance, and likely does not respect privacy.</li>
 +
  <li><a href="https://mail.yahoo.com/">Yahoo! Mail</a>: works without JS apparently, but you need JS enabled to create a yahoo account</li>
 +
  <li><a href="https://mail.yandex.com/">Yandex Mail</a>: You can register and sign in with LibreJS enabled, but not send mail in the no-js interface. Also: looks to be Russian based, so almost certainly under surveillance.</li>
 +
  <li>Microsoft <a href="https://outlook.live.com/owa/">Outlook.com</a> (@outlook.com, @live.com. Old emails: @hotmail.com, @msn.com): Requires nonfree Javascript.</li>
 +
</ul>
 +
 +
<h3>Under Review</h3>
 +
These are systems either currently under review, or undergoing a status change.
 +
<ul>
 +
  <li><a href="https://autistici.org">Autistici/Inventati (A/I)</a>: Sign up needs JS. They are working on becoming LibreJS compliant, but no ETA on this yet.<!--Mail sent to info@autistici.org, asking for account. Tried to start again - 2015-03-11 - couldn't use signup form. (2015-05-13) got response from their support people. They're working on making it compliant - but no promise on an ETA--></li>
 +
  <li><a href="https://hushmail.com">Hushmail</a>: Site doesn't load without JS.<!--2015-01-15 - Site doesn't load without JS. Pretty much all blocked by LibreJS.--></li>
 +
  <li><a href="https://mailbox.org">mailbox.org</a> JS needed to register or use system. <!--20161016--></li>
 +
  <li><a href="https://mailoo.org">Mailoo.org</a>: <strong>Explicitly states it runs on free software. Currently French only - would appreciate help translating</strong>(registrations were closed as of 2017/01/25).</li>
 +
  <li><a href="https://protonmail.ch">ProtonMail</a> JS needed to register or use system.<!--Get a message "JS must be enabled to encrypt and decrypt mail in the browser" (2015-05-12)--></li>
 +
  <li><a href="https://tuffmail.com">Tuffmail</a>: Registration form didn't need Javascript, though an application attempt resulted in no actual account being created. Investigations continue.</li>
 +
  <li><a href="https://tutanota.de">Tutanota</a>: Looks promising - they're working on becoming LibreJS Compliant.<!--2015-05-13 - LibreJS blocks pretty much all scripts on the page - js needed for registration. They do look keen on GPLv3 and security, as well as libre/freedom, so look promising. 2015-05-15 - had reply from hello@tutao.de (Arne) - they're working on it.--></li>
 +
  <li><a href="https://unseen.is">Unseen</a>: Site doesn't load without JS.</li>
 +
</ul>
 +
 +
<h3>Other</h3>
 +
Systems that don't fit conveniently into any category, but we've reviewed or processed them.
 +
<ul>
 +
  <li><a href="https://mailinabox.email/">Mail-in-a-Box</a> is an easy-to-deploy GNU/Linux mail server so you can run your own webmail</li>
 +
  <li><a href="https://mailcow.email/">mailcow</a> is a docker based GNU/Linux mail server</li>
 +
<!-- ian: i commented closed down stuff,  no one cares. -->
 +
<!-- <li><a href="https://shortmail.com">Shortmail.com</a>: (closed down)</li> -->
 +
  <!-- <li><a href="https://ruggedinbox.com">RuggedInbox.com</a>: (closed down)<strong>Signup is quick and works with LibreJS.</strong> SquirrelMail (works without JS) can be used to access webmail, POP/IMAP clients can also be used.(2016/07/20 - looks defunct. Times out)</li> -->
 +
  <!-- <li><a href="http://sigaint.org/">SIGAINT</a> (closed down) <strong>Requires user to run TOR browser. Usable with LibreJS plugin activated, or JavaScript disabled.</strong> To use POP/IMAP services, users will need to upgrade to (paid) PRO package.</li> -->
 +
</ul>
 +
</pre>
 +
 +
Here's the changelog of what the above HTML text does:
  
 
* Add the official names for each webmail services as a link (use exact names, eg FastMail, not Fastmail):
 
* Add the official names for each webmail services as a link (use exact names, eg FastMail, not Fastmail):

Revision as of 16:53, 19 April 2018

Issue for https://www.fsf.org/resources/webmail-systems. The proper FSF email address to send this issue to is: resources@fsf.org

Recommended

These new webmail services could be added to the "Recommended section in https://www.fsf.org/resources/webmail-systems :

1: "In order to create a Red Account you will need an invite. Obtain an Invite Code from a friend." - https://riseup.net/en/email/settings/mail-accounts#how-do-i-create-an-email-account

Tasks


<h3>Recommended</h3>
<p>Some of these services are gratis, but that's a separate issue.
  Recall that "free software" refers to freedom, not price.
  <ul>
    <li><a href="https://openmailbox.org">OpenMailBox</a>: <strong>Runs explicitly on free software</strong>. Service started in June 2013.</li>
    <li><a href="https://posteo.de">Posteo</a>: <strong>Fully compliant with LibreJS's standards, but a bug in LibreJS causes the site to not work when the plugin is enabled. Does not work without JS</strong>. Credit card payments do not work.</li>
    <li><a href="https://riseup.net">Riseup</a>: Geared more toward activists - they have a manual screening process. Signup works with LibreJS. SquirrelMail (works without JS) can be used to access webmail, POP/IMAP clients can also be used. To access Squirrel mail, access the online mail client page, and select the "old webmail(squirrelmail only)" link.</li>

    <li>Some services will let you sign up and sign in without non-free JavaScript, and use IMAP/POP3 from a desktop program, but have broken webmail:
    <ul>
      <li><a href="https://kolabnow.com">Kolab Now</a>: Swiss based paid service focused on ensuring your privacy. Highly resistant to PRISM and similar programs. Runs on free software. Currently becoming LibreJS compliant.</li>
      <li><a href="https://mailnesia.com">Mailnesia</a>.</li>
      <li><a href="https://safe-mail.net">Safe-mail.net</a>.</li>
      <li><a href="https://vfemail.net">VFEmail</a> (uses google syndication, and captcha - both non-free).</li>
    </ul>
</li>
</ul></p>

<p>For privacy purposes, you may sometimes want to use a disposable email address for one or a small number of messages. These disposable email services have been verified to work without proprietary JavaScript:</p>
<ul>
  <li><a href="https://10minutemail.com/">10 Minute Email</a></li>
  <li><a href="https://guerrillamail.com/">Guerrilla Mail</a></li>
  <li><a href="https://spamgourmet.com/">Spam Gourmet</a></li>
</ul>

<p>
  To ask about a mail service not listed here, or request corrections and updates, please send a mail to: monoverde at riseup dot net : with "Webmail System" in the subject line.
</p>

<h3>Not Recommended</h3>
Systems we've investigated and found wanting.
<ul>
  <li><a href="https://fastmail.fm">FastMail</a>: Sign up, sign in, and webmail all work smoothly. This is a paid service with a 60-day free trial. - UPDATE: was notified that this is not the case.</li>
  <li>Google <a href="https://gmail.com">Gmail</a>: You can sign in and use Gmail without non-free Javascript, but you have to make the account in a special way, through <a href="https://accounts.google.com/NewAccount">https://accounts.google.com/NewAccount</a>. This is an old sign-up form; the currently recommended sign-up form is no good, since it requires nonfree JavaScript code. But Gmail is run by Google and was specifically named as part of the PRISM spying program.</li>
  <li><a href="https://mail.ru">Mail.Ru</a>: Sign up, sign in, and webmail all work smoothly. BEWARE though - it is almost certainly under governmental surveillance, and likely does not respect privacy.</li>
  <li><a href="https://mail.yahoo.com/">Yahoo! Mail</a>: works without JS apparently, but you need JS enabled to create a yahoo account</li>
  <li><a href="https://mail.yandex.com/">Yandex Mail</a>: You can register and sign in with LibreJS enabled, but not send mail in the no-js interface. Also: looks to be Russian based, so almost certainly under surveillance.</li>
  <li>Microsoft <a href="https://outlook.live.com/owa/">Outlook.com</a> (@outlook.com, @live.com. Old emails: @hotmail.com, @msn.com): Requires nonfree Javascript.</li>
</ul>

<h3>Under Review</h3>
These are systems either currently under review, or undergoing a status change.
<ul>
  <li><a href="https://autistici.org">Autistici/Inventati (A/I)</a>: Sign up needs JS. They are working on becoming LibreJS compliant, but no ETA on this yet.<!--Mail sent to info@autistici.org, asking for account. Tried to start again - 2015-03-11 - couldn't use signup form. (2015-05-13) got response from their support people. They're working on making it compliant - but no promise on an ETA--></li>
  <li><a href="https://hushmail.com">Hushmail</a>: Site doesn't load without JS.<!--2015-01-15 - Site doesn't load without JS. Pretty much all blocked by LibreJS.--></li>
  <li><a href="https://mailbox.org">mailbox.org</a> JS needed to register or use system. <!--20161016--></li>
  <li><a href="https://mailoo.org">Mailoo.org</a>: <strong>Explicitly states it runs on free software. Currently French only - would appreciate help translating</strong>(registrations were closed as of 2017/01/25).</li>
  <li><a href="https://protonmail.ch">ProtonMail</a> JS needed to register or use system.<!--Get a message "JS must be enabled to encrypt and decrypt mail in the browser" (2015-05-12)--></li>
  <li><a href="https://tuffmail.com">Tuffmail</a>: Registration form didn't need Javascript, though an application attempt resulted in no actual account being created. Investigations continue.</li>
  <li><a href="https://tutanota.de">Tutanota</a>: Looks promising - they're working on becoming LibreJS Compliant.<!--2015-05-13 - LibreJS blocks pretty much all scripts on the page - js needed for registration. They do look keen on GPLv3 and security, as well as libre/freedom, so look promising. 2015-05-15 - had reply from hello@tutao.de (Arne) - they're working on it.--></li>
  <li><a href="https://unseen.is">Unseen</a>: Site doesn't load without JS.</li>
</ul>

<h3>Other</h3>
Systems that don't fit conveniently into any category, but we've reviewed or processed them.
<ul>
  <li><a href="https://mailinabox.email/">Mail-in-a-Box</a> is an easy-to-deploy GNU/Linux mail server so you can run your own webmail</li>
  <li><a href="https://mailcow.email/">mailcow</a> is a docker based GNU/Linux mail server</li>
<!-- ian: i commented closed down stuff,  no one cares. -->
<!-- <li><a href="https://shortmail.com">Shortmail.com</a>: (closed down)</li> -->
  <!-- <li><a href="https://ruggedinbox.com">RuggedInbox.com</a>: (closed down)<strong>Signup is quick and works with LibreJS.</strong> SquirrelMail (works without JS) can be used to access webmail, POP/IMAP clients can also be used.(2016/07/20 - looks defunct. Times out)</li> -->
  <!-- <li><a href="http://sigaint.org/">SIGAINT</a> (closed down) <strong>Requires user to run TOR browser. Usable with LibreJS plugin activated, or JavaScript disabled.</strong> To use POP/IMAP services, users will need to upgrade to (paid) PRO package.</li> -->
</ul>

Here's the changelog of what the above HTML text does:

External links

This link is useful because it lists if the webmails requires JS or not, and it lists privacy issues.